Resource Exhaustion Vulnerability in elixir-tesla Tesla by Elixir

CVE-2026-48597

What is CVE-2026-48597?

The elixir-tesla Tesla library contains a vulnerability that allows an attacker to influence outgoing request URLs, leading to atom table exhaustion. By converting URL schemes into BEAM atoms without validation, repeated requests can fill the atom table to capacity. As the atom table reaches its limit, the Elixir VM is rendered inoperable, resulting in a denial of service for applications using affected versions of Tesla. This vulnerability poses significant risks, particularly for systems relying on URL forwarding features or redirect responses.

References